Beveiligingsadvies

CVE-2026-25737

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-09 20:08:32

Laatst bijgewerkt 2026-03-09 20:34:21

Toegewezen door GitHub_M

CVSS-score 8.9

Status PUBLISHED

Beschrijving

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists even though file extension restrictions are configured. The restriction is enforced only at the UI level. An attacker can bypass these restrictions and upload malicious files.

← Alle CVE's bekijken Bekijk op cve.org ↗